Privacy Policy

At Calma CBD, accessible via www.calmacbd.shop, your privacy is a priority. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

By using this website, you agree to the practices described in this policy.

1. Data Controller

Calma CBD is the data controller responsible for your personal information.
For any questions or requests, you may contact us via email at:
[email protected]

2. What Personal Data We Collect

We may collect and process the following types of personal data:

  • Identity Data: Name, company name, business title (if applicable)

  • Contact Data: Email address, phone number (if provided), billing/shipping address

  • Order Data: Details related to purchases or wholesale orders

  • Communication Data: Emails and correspondence with us

  • Marketing Data: Preferences for receiving communications

  • Technical Data: IP address, browser type, and device information (via cookies)

3. How We Collect Your Data

We collect data when:

  • You email us at [email protected]

  • You place an order on our website

  • You submit a wholesale application or inquiry

  • You sign up to receive marketing communications

  • You browse our website (via cookies or similar technologies)

4. Why We Collect Your Data

We process your personal data for the following purposes:

  • To process and fulfill online orders

  • To manage wholesale applications and customer accounts

  • To communicate with you regarding your inquiries or purchases

  • To send you emails about our latest products, special offers, and updates (only with your consent or as permitted under applicable law)

  • To maintain internal records and support website security

  • To comply with legal and regulatory obligations

5. Legal Basis for Processing

We process personal data based on the following GDPR legal grounds:

  • Contractual necessity – to process your orders or fulfill agreements

  • Legitimate interests – for administrative purposes, service improvement, and limited marketing

  • Consent – for sending you promotional emails (you may opt out at any time)

  • Legal obligation – to meet regulatory and tax requirements

6. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share it with:

  • Trusted third-party service providers (e.g., payment processors, IT services) strictly for processing orders or delivering services

  • Regulatory bodies or law enforcement, if legally required

All third parties are bound by confidentiality and data protection obligations.

7. Data Storage and Retention

Your data is stored on secure, encrypted servers. We retain it only for as long as necessary to fulfill the purposes outlined above or to comply with applicable legal obligations. After this period, your data is securely deleted or anonymized.

8. Your GDPR Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or outdated data

  • Request erasure of your data (“right to be forgotten”)

  • Object to processing or request restrictions

  • Withdraw marketing consent at any time

  • Request a copy of your data (data portability)

  • Lodge a complaint with your national data protection authority

To exercise these rights, contact us at [email protected].

9. Marketing Communications

If you opt in to receive marketing emails, we may occasionally contact you about:

  • New CBD product launches

  • Special promotions and discounts

  • Updates on our services or business

You can unsubscribe at any time by clicking the link in any email or contacting [email protected].

10. Cookies and Tracking Technologies

Our website uses cookies and similar tools to improve functionality and gather analytics. You may control or disable cookies in your browser settings. By continuing to use the site, you agree to the use of these technologies.

Please refer to our Cookie Policy for more details.

11. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure such transfers comply with GDPR requirements, using mechanisms like Standard Contractual Clauses or equivalent safeguards.

12. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy policies. Please review those independently before submitting your data.

13. Policy Updates

We may update this policy from time to time. Changes will be posted on this page with an updated “Effective Date.” We encourage you to check back periodically.

14. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:
[email protected]